CareFirst Data Breach Suit Moves Forward Despite ‘Thin’ Evidence

Customers of CareFirst Inc. advanced a proposed class action alleging it failed to protect the personal information of more than one million people that was exposed in a 2014 data breach.

Chantal Attias, Richard Bailey, Latanya Bailey, and four other plaintiffs provided just enough evidence in support of one of their breach-of-contract theories to avoid summary judgment, Judge Christopher R. Cooper of the US District Court for the District of Columbia said Wednesday.

Although the plaintiffs’ evidence was “thin,” a reasonable jury could conclude that the health insurer breached an implied promise to take reasonable steps to protect their personal ...